Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z2gltm31Bt8-5rIxeZhT8r2dzOY.roa
File: z2gltm31Bt8-5rIxeZhT8r2dzOY.roa (raw, json)
Hash identifier: mdUUAMZPbecxaGDNPfFEczqtl8Teq0rsGkYCqAO2RuA=
Subject key identifier: CF:68:25:B6:6D:F5:06:DF:3E:E6:B2:31:79:98:53:F2:BD:9D:CC:E6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185C3AA118BE81A39637480AA771A1BA548
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z2gltm31Bt8-5rIxeZhT8r2dzOY.roa
Signing time: Wed 18 Jan 2023 06:56:20 +0000
ROA not before: Wed 18 Jan 2023 06:56:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204902
IP address blocks: 195.133.77.0/24 maxlen: 24
195.133.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:aa:11:8b:e8:1a:39:63:74:80:aa:77:1a:1b:a5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 18 06:56:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf6825b66df506df3ee6b231799853f2bd9dcce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:75:b8:a2:66:5a:2b:45:17:68:3e:4f:5d:
a5:b0:ef:bf:db:ed:43:30:95:fd:ad:8e:2b:af:da:
86:c0:9a:3f:31:7a:6a:d5:58:ab:5f:c3:95:0c:ca:
3f:d7:78:e3:67:ae:d0:0a:91:91:72:2c:0b:ac:b6:
c2:f0:ce:e0:f2:47:89:21:70:52:8b:ed:10:b5:00:
e6:09:4c:9b:f0:8d:25:e3:41:6e:04:96:df:c3:fb:
e3:c6:39:60:9e:a6:53:6d:bf:b2:fc:53:d7:12:b0:
f3:0f:b8:4e:01:d4:7c:51:e8:ab:e7:f3:92:06:07:
58:07:b9:88:9a:ed:14:f2:06:ce:b3:fc:43:a8:bb:
a8:13:ab:df:13:28:bf:28:98:98:c2:f0:4d:e3:74:
8f:48:5d:a6:08:ac:28:c6:23:9b:60:2b:6e:ad:5b:
ac:ad:48:6d:28:d5:8a:20:24:b7:1c:55:8f:3a:25:
36:2a:9d:0e:ed:cf:b8:1c:5e:7f:6a:57:c4:43:08:
35:cb:b5:f8:05:cd:14:b9:83:be:1d:c4:dc:e6:a4:
1f:c2:22:b8:16:79:b6:74:f9:e9:f9:7e:56:aa:c6:
11:f8:50:78:8c:dc:7b:45:a1:90:fa:54:ee:e9:ed:
2d:86:98:e0:f7:9b:55:7f:e3:68:47:ee:a0:2f:7d:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:68:25:B6:6D:F5:06:DF:3E:E6:B2:31:79:98:53:F2:BD:9D:CC:E6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z2gltm31Bt8-5rIxeZhT8r2dzOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.77.0/24
195.133.86.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d6:6e:84:8e:bf:ee:20:34:d5:b7:c0:84:90:82:a0:9c:8c:
ae:df:03:bf:22:ff:4d:67:c5:9a:65:86:47:1f:81:dd:a7:b5:
00:1c:b8:2e:59:04:49:ba:67:72:76:82:20:fc:80:e6:af:64:
93:a6:43:fe:85:e4:7c:67:b1:c2:bd:6c:4a:15:12:98:85:15:
28:49:42:6d:12:b5:df:76:98:5a:46:79:3a:f6:17:c7:ca:99:
3e:ed:6c:52:69:29:46:10:4f:dc:64:cd:9e:c6:38:29:d5:8a:
72:df:cd:18:c2:38:5b:c5:4f:e6:2b:53:18:97:1e:4b:46:2f:
48:77:72:8f:7a:07:ea:a9:d7:b5:17:02:72:d4:a6:53:b3:11:
a9:08:fa:5c:34:41:26:0d:df:72:8d:dd:27:66:39:66:5f:45:
05:25:50:1f:dd:d2:63:19:4a:80:75:12:cd:4a:3f:a5:fa:18:
dd:2f:3a:33:dc:f6:1d:06:d5:5d:4f:b2:5c:a9:ca:83:a9:08:
db:a8:1b:63:54:35:53:2c:58:8c:5e:cd:10:3f:ab:be:a8:db:
21:10:60:cc:29:2b:b6:4a:38:e7:a0:cd:a6:5e:c2:7b:50:5f:
bc:9b:58:51:f8:27:75:1a:4a:df:49:21:31:18:f7:b4:d5:90:
21:2c:59:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:16 2023 by rpki-client on console-ams.rpki-client.org